C_HRHFC_2311 試験問題を無料オンラインアクセス

Consider the topology:
Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.
An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.
The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.
What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

• A.Create a new service object for TELNET and set the maximum session TTL.
• B.Set the maximum session TTL value for the TELNET service object.
• C.Create a new firewall policy and place it above the existing SSLVPN policy for the SSL VPN traffic, and set the new TELNET service object in the policy.
• D.Set the session TTL on the SSLVPN policy to maximum, so the idle session timeout will not happen after 90 minutes.

FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.
In this scenario, which statement about VLAN IDs is true?

• A.The two VLAN subinterfaces must have different VLAN IDs.
• B.The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in the same subnet.
• C.The two VLAN subinterfaces can have the same VLAN ID only if they have IP addresses in different subnets.
• D.The two VLAN subinterfaces can have the same VLAN ID only if they belong to different VDOMs.

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

• A.A session for denied traffic is created.
• B.Denied users are blocked for 30 minutes.
• C.The number of logs generated by denied traffic is reduced.
• D.Device detection on all interfaces is enforced for 30 minutes.

An administrator must disable RPF check to investigate an issue.
Which method is best suited to disable RPF without affecting features like antivirus and intrusion prevention system?

• A.Disable the RPF check at the FortiGate interface level for the reply check .
• B.Enable asymmetric routing at the interface level.
• C.Enable asymmetric routing, so the RPF check will be bypassed.
• D.Disable the RPF check at the FortiGate interface level for the source check.

Which two statements explain antivirus scanning modes? (Choose two.)

• A.In proxy-based inspection mode, files bigger than the buffer size are scanned.
• B.In flow-based inspection mode, files bigger than the buffer size are scanned.
• C.In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.
• D.In proxy-based inspection mode, antivirus scanning buffers the whole file for scanning, before sending it to the client.